Login authentication method, device, equipment, storage medium and computer program product

Abstract

The application discloses a login authentication method and device, equipment, storage medium and computer program product, and belongs to the technical field of information management. The method comprises the following steps: obtaining input identity authentication information, determining a grouping index according to the identity authentication information and the total number of authentication servers; performing grouping processing on the identity authentication information according to the grouping index to generate a target grouping sequence; determining a digital sequence corresponding to the target grouping sequence according to a preset corresponding relationship between the grouping sequence and the digital sequence, and determining an encoding sequence of the identity authentication information based on the digital sequence; and sending the encoding sequence and the grouping index to a hop authentication module, and the hop authentication module is used for performing login authentication based on the encoding sequence and the grouping index. In this way, the security problems of account password leakage, replay attacks and brute force cracking can be prevented, and the security of the login process is improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of information management, and particularly relates to a login authentication method and device, equipment, a storage medium and a computer program product. BACKGROUND

[0002] An information management platform has significant advantages in centralized management, storage, processing and sharing of various information, especially in maintaining software product information. Software product information usually includes software function description, version information, usage guide, price, update history and the like. With the help of the information management platform, the complexity of operation and maintenance can be effectively reduced, software product information can be ensured to be updated in time, and sharing with other departments is facilitated.

[0003] When an authorized user logs in the information management platform, the account name and password input by the user are acquired, and the password is encrypted using a key to ensure the security of the account password in the transmission process. However, if the key is leaked, the encrypted information of the account password will no longer be secure. A third party may log in the system using the leaked key and password, thereby causing the information stored in the system to face serious security risks. SUMMARY

[0004] Embodiments of the present application provide a login authentication method, device, equipment, storage medium and computer program product to at least solve the problem that the account password is easily leaked during login of an authorized user to an information management platform.

[0005] To solve the above technical problems, the present application is implemented as follows:

[0006] In a first aspect, the embodiments of the present application provide a login authentication method applied to a client, comprising: acquiring input identity authentication information, determining a grouping index according to the identity authentication information and the total number of authentication servers; performing grouping processing on the identity authentication information according to the grouping index to generate a target grouping sequence; determining a digital sequence corresponding to the target grouping sequence according to a preset correspondence between a grouping sequence and a number, and determining an encoding sequence of the identity authentication information based on the digital sequence; and sending the encoding sequence and the grouping index to a hop authentication module, wherein the hop authentication module is configured to perform login authentication based on the encoding sequence and the grouping index.

[0007] In a second aspect, the embodiments of the present application provide a login authentication method, applied to a hop authentication module, the hop authentication module comprising a plurality of hop authentication units corresponding to authentication servers, and the method comprising: obtaining an encoding sequence and a grouping index; wherein the grouping index is determined by a client according to input identity authentication information and a total number of authentication servers; the encoding sequence is determined according to a correspondence between a preset grouping sequence and a number sequence corresponding to a target grouping sequence, and is determined based on the number sequence; the target grouping sequence is generated by grouping processing the identity authentication information according to the grouping index; the encoding sequence is grouped according to the grouping index to obtain a grouping sequence; a target hop authentication unit corresponding to the grouping sequence is determined, the grouping sequence is encrypted according to an independent authentication sequence corresponding to the target hop authentication unit to obtain a ciphertext conversion sequence; and the ciphertext conversion sequence is transmitted to the target hop authentication unit, and an authorized access instruction of the client is generated in a case where the target hop authentication unit determines that the verification is completed based on the ciphertext conversion sequence.

[0008] In a third aspect, the embodiments of the present application provide a client, comprising: an index determination module configured to obtain input identity authentication information, and determine a grouping index according to the identity authentication information and a total number of authentication servers; a sequence generation module configured to group process the identity authentication information according to the grouping index to generate a target grouping sequence; a sequence determination module configured to determine a number sequence corresponding to the target grouping sequence according to a correspondence between a preset grouping sequence and the number sequence, and determine an encoding sequence of the identity authentication information based on the number sequence; and an information sending module configured to send the encoding sequence and the grouping index to a hop authentication module, the hop authentication module being configured to perform login authentication based on the encoding sequence and the grouping index.

[0009] In a fourth aspect, an embodiment of the present application provides a hop authentication module, the hop authentication module comprising a plurality of hop authentication units corresponding to authentication servers, comprising: an information acquisition module configured to acquire an encoding sequence and a grouping index; wherein the grouping index is determined by a client according to input identity authentication information and a total number of authentication servers; the encoding sequence is determined according to a correspondence between a preset grouping sequence and a number sequence corresponding to a target grouping sequence, and is determined based on the number sequence; the target grouping sequence is generated by grouping processing the identity authentication information according to the grouping index; a sequence grouping module configured to group process the encoding sequence according to the grouping index to obtain a grouping sequence; a sequence encryption module configured to determine a target hop authentication unit corresponding to the grouping sequence, encrypt the grouping sequence according to an independent authentication sequence corresponding to the target hop authentication unit to obtain a ciphertext conversion sequence; and an instruction generation module configured to generate an authorized access instruction of the client by transmitting the ciphertext conversion sequence to the target hop authentication unit, and generate the authorized access instruction of the client in a case where the target hop authentication unit determines that the verification is completed based on the ciphertext conversion sequence.

[0010] In a fifth aspect, an embodiment of the present application provides an electronic device, comprising a processor and a memory, the memory storing programs or instructions executable on the processor, and the programs or instructions are executed by the processor to implement the steps of the method according to the first aspect or the second aspect.

[0011] In a sixth aspect, an embodiment of the present application provides a computer readable storage medium, the computer readable storage medium storing programs or instructions, and the programs or instructions are executed by a processor to implement the steps of the method according to the first aspect or the second aspect.

[0012] In a seventh aspect, an embodiment of the present application provides a computer program product, the computer program product comprising a computer program stored on a non-transitory computer readable storage medium, the computer program comprising program instructions, and the program instructions are executed by a computer to make the computer execute the steps of the method according to the first aspect or the second aspect.

[0013] In the embodiment of the present application, identity authentication information input is acquired, a grouping index is determined according to the identity authentication information and the total number of authentication servers, the identity authentication information is grouped and processed according to the grouping index to generate a target grouping sequence, a digital sequence corresponding to the target grouping sequence is determined according to a preset correspondence between the grouping sequence and the digital sequence, and an encoding sequence of the identity authentication information is determined based on the digital sequence; the encoding sequence and the grouping index are sent to a hop authentication module, and the hop authentication module is configured to perform login authentication based on the encoding sequence and the grouping index. In this way, by dynamically grouping and encoding the identity authentication information, security problems such as account password leakage, replay attacks, and brute force attacks can be prevented, and the security of the login process can be improved.

[0014] It should be understood that the foregoing general description and the following detailed description are only exemplary and explanatory, and are not limiting to the present application. BRIEF DESCRIPTION OF DRAWINGS

[0015] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and serve to explain the principles of the present application, together with the description.

[0016] Figure 1 Fig. 1 shows a flow diagram of a login authentication method according to an embodiment of the present application;

[0017] Figure 2 Fig. 2 shows another flow diagram of a login authentication method according to an embodiment of the present application;

[0018] Figure 3 Fig. 3 shows a structural diagram of a client according to an embodiment of the present application;

[0019] Figure 4 Fig. 4 shows a structural diagram of a hop authentication module according to an embodiment of the present application;

[0020] Figure 5 Fig. 5 shows a hardware structural diagram of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0021] The exemplary embodiments will be described in detail herein with reference to the attached drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of apparatuses and methods consistent with some aspects of the present application as detailed in the appended claims.

[0022] Software product information refers to all information related to computer software, information systems or embedded software in devices, and computer software provided when providing computer information system integration, application services and other technical services. It includes but is not limited to software function description, version information, usage guide, price and update history, etc.

[0023] Maintaining software product information by means of an information management platform has many advantages. First, the characteristics of the information management platform, such as "ready-to-use" and "flexible expansion", can simplify a part of the operation and maintenance work, and reduce the pressure on the operation and maintenance team. Secondly, the hardware and maintenance work of the information management platform is handled by the supplier, which includes handling server hardware and software problems, managing user access and security, storing and managing data, and implementing upgrades and patches. Enterprises using the information management platform can focus more on their core business. Currently, software managers usually maintain and manage their software product information by means of the information management platform.

[0024] When an authorized user logs in to the information management platform, the platform obtains the account name and account password entered by the user, and encrypts the account password with a key to ensure the security of the account password during transmission. However, if the key is leaked, the account password will have no privacy for third parties, and third parties will easily log in to the system with the obtained account password, so that the software product information stored in the system is no longer secure.

[0025] In view of the above problems of the information management platform in the login authentication process, the embodiment of the present application provides a login authentication method, which groups and encodes the identity authentication information to prevent security problems such as account password leakage, replay attack and brute force cracking, and improve the security of the login process.

[0026] Figure 1 A flowchart of a login authentication method provided by an embodiment of the present application is shown, and the execution subject of the method can be a client. As shown in the figure, the method 100 can include the following steps:

[0027] Step 101: Obtain the input identity authentication information, and determine the grouping index according to the identity authentication information and the total number of authentication servers.

[0028] In a specific implementation, the account name and the account password input by the current pre-visit user for logging into the information management platform are acquired, and identity authentication information of the current pre-visit user is generated according to the account name and the account password, wherein the account password can be a 14- to 16-bit string composed of numbers, letters and special characters. Further, a grouping index is determined according to the identity authentication information and the total number of authentication servers. For example, the identity authentication information can be hashed by using a hash algorithm (such as MD5 or SHA256) to obtain a hash value, and the grouping index is determined according to a part of the hash value and the total number of authentication servers.

[0029] Step 102: Grouping processing is performed on the identity authentication information according to the grouping index, and a target grouping sequence is generated.

[0030] In a specific implementation, the grouping manner of the identity authentication information can be determined according to the grouping index obtained in step 101, and the identity authentication information is grouped according to the grouping manner to generate a grouping sequence. For example, the identity authentication information is an account password input by a user, and the account password is AAbb12345678=. The identity authentication information is grouped to generate a target grouping sequence AAbb1234, Abb12345, bb123456, etc.

[0031] Step 103: A number sequence corresponding to the target grouping sequence is determined according to a preset correspondence between the grouping sequence and the number, and an encoding sequence of the identity authentication information is determined based on the number sequence.

[0032] In a specific implementation, the correspondence between the grouping sequence and the number can be obtained from a pre-stored grouping record table. The grouping record table can include a sequence field and a number field. The sequence field in the grouping record table stores all grouping sequences, which are obtained by grouping the login password of the current pre-visit user according to different grouping manners and different grouping indexes. Here, the different grouping indexes are values calculated based on all integers randomly generated by a random function according to the login password of the current pre-visit user. The number field in the grouping record table stores numbers, and the grouping sequence stored in the sequence field and the number stored in the number field correspond to each other. It should be noted that the number of characters constituting the grouping sequence stored in the sequence field is at least 1 and at most the total number of the login password minus 1.

[0033] The numbers D1, D2,..., Dc corresponding to the target grouping sequence C1, C2,..., Cc in the grouping record table of the current pre-visit user are found out in sequence, and the encoding sequence of the current pre-visit user for this visit is obtained by concatenating D1, D2,..., Dc in order.

[0034] Step 104: sending the encoding sequence and the grouping index to a hop authentication module, the hop authentication module being configured to perform login authentication based on the encoding sequence and the grouping index.

[0035] In a specific implementation, the client sends the encoding sequence and the grouping index to the hop authentication module, and the hop authentication module performs corresponding login authentication according to the received encoding sequence and the grouping index.

[0036] In this way, by dynamically grouping and encoding the identity authentication information, security problems such as account password leakage, replay attacks, and brute force attacks can be prevented, and the security of the login process can be improved.

[0037] In a possible implementation, in step 101, the grouping index is determined according to the identity authentication information and the total number of authentication servers, including:

[0038] hash processing the identity authentication information to obtain a hash value of the identity authentication information; converting English characters in the hash value of the identity authentication information into corresponding ASCII code values and summing the ASCII code values to obtain a character ASCII code value total sum; and determining the grouping index according to the character ASCII code value total sum, the total number of authentication servers, and a preset hop coefficient.

[0039] In the embodiment of the application, the MD5 algorithm can be used to hash process the identity authentication information of the current pre-visit user to obtain a corresponding hash value A1; English characters in the hash value A1 of the identity authentication information are converted into corresponding ASCII code values and summed to obtain a character ASCII code value total sum A2; and the grouping index is determined according to the character ASCII code value total sum A2, the total number of authentication servers, and a preset hop coefficient, wherein the calculation formula of the grouping index of the current visit of the current pre-visit user is as follows:

[0040] ;

[0041] wherein, B 1 is the grouping index; [·] is the rounding function; A 2 is the hash value A 1 contains the sum of the code values of all English characters in the ASCII code table in decimal numbers; P 1 is the total number of authentication servers set by the information management platform for identity authentication; is a preset hop coefficient, and the hop coefficient can ensure that the calculation result is between 1 and 16; A 3 is a positive integer randomly generated in the interval [Z1, Z2] using a random function, and Z1 and Z2 are respectively a preset minimum value of the interval and a preset maximum value of the interval.

[0042] Here, P 1- A 3 is a positive number, A the value of 3 is selected based on the interval [Z1, Z2], and Z 1 and Z 2 are based on the maximum and minimum values preset by 1; and P 1; and B the comparison result of 1 is used to determine the grouping manner, based on which it is determined whether to iterate grouping or cut grouping.

[0043] In a possible implementation, in step 102, the identity authentication information is grouped according to the grouping index to generate a target grouping sequence, including:

[0044] According to the comparison result of the grouping index and the preset grouping determination value, a grouping rule is determined; and the identity authentication information is grouped according to the grouping rule to generate a target grouping sequence.

[0045] The grouping rule can include iterative grouping, cut grouping, grouping based on a hash value, grouping based on a number range, and the like.

[0046] In the embodiment, the grouping index B1 can be compared with the preset grouping determination value P2, a corresponding grouping rule is determined according to the comparison result, and then the identity authentication information is grouped according to the grouping rule to obtain a target grouping sequence.

[0047] In a possible implementation, the grouping rule includes iterative grouping and cut grouping, and the determination of the grouping rule according to the comparison result of the grouping index and the preset grouping determination value includes:

[0048] In the case where the grouping index is greater than or equal to the preset grouping determination value, iterative grouping is determined as the grouping rule; and in the case where the grouping index is less than the grouping determination value, cut grouping is determined as the grouping rule.

[0049] In a specific implementation, the grouping index B1 and the grouping determination value P2 are compared in size, the grouping manner is determined, and all grouping sequences C1, C2,..., Cc of the current pre-access user in this access are obtained. If B1≥P2, it is determined that the grouping manner of the current pre-access user in this access is iterative grouping, and the identity authentication information of the current pre-access user is iteratively grouped according to the iterative grouping rule to obtain all grouping sequences C1, C2,..., Cc of the current pre-access user in this access;

[0050] If B1 < P2, it is determined that the grouping manner of the current pre-visit user in this visit is the cutting grouping, the identity authentication information of the current pre-visit user is cut according to the cutting grouping rule, and all grouping sequences C1, C2,..., Cc of the current pre-visit user in this visit are obtained.

[0051] In a possible implementation, in the case that the grouping rule is the iterative grouping, the step 102 of grouping the identity authentication information according to the grouping index to generate a target grouping sequence includes:

[0052] According to the preset extraction rule, a plurality of target characters in the identity authentication information are determined; and from each target character, a target character quantity of characters is extracted from the identity authentication information in sequence, to obtain a target grouping sequence.

[0053] In an exemplary embodiment, in the order from left to right, a first grouping sequence C1 is obtained by extracting B1 characters from the left of the first character in the identity authentication information of the current pre-visit user; a second grouping sequence C2 is obtained by extracting B1 characters from the left of the second character in the identity authentication information of the current pre-visit user; and so on, a cth grouping sequence is obtained by extracting B1 characters from the left of the cth character in the identity authentication information of the current pre-visit user, and the c grouping sequences are sequentially marked as C1, C2,..., Cc according to the extraction order. It should be noted that the number of characters extracted from the left of the (c+1)th character in the identity authentication information of the current pre-visit user is B1-1, which cannot be used as a grouping sequence.

[0054] For example, if the account password entered by the user is AAbb12345678-= and B1=8, the corresponding grouping sequences are AAbb1234, Abb12345, bb123456, b1234567, 12345678, 2345678-, and 345678-.

[0055] In another possible implementation, in the case that the grouping rule is the cutting grouping, the step 102 of grouping the identity authentication information according to the grouping index to generate a target grouping sequence includes:

[0056] According to the target character quantity, the identity authentication information is divided into a plurality of sequences; and according to the plurality of sequences, a target grouping sequence is generated.

[0057] In an exemplary embodiment, the current pre-visit user's identity authentication information is cut into c parts, each cut part is taken as a group sequence, the number of target characters of each group sequence is B1, and the c group sequences are marked as C1, C2,..., Cc in turn from left to right according to the positions of the group sequences in the current pre-visit user's identity authentication information before cutting.

[0058] Here, it should be noted that if the number of characters constituting the current pre-visit user's account password is not enough to be divided by B1, the number of characters in the first c-1 group sequences is B1, and the number of characters in the last group sequence is less than B1.

[0059] For example, if the user enters an account password of AAbb12345678-= and B1=3, the corresponding group sequences are AAb, b12, 345, 678 and =-.

[0060] In a possible implementation, after the step 104 of sending the encoding sequence and the group index to the hop authentication module, the method further includes:

[0061] obtaining an authorized access instruction returned by the hop authentication module based on the encoding sequence and the group index, and adding a preset value to each number in the digital sequence corresponding to the target group sequence.

[0062] The authorized access instruction is used to indicate that the login authentication based on the identity authentication information is passed.

[0063] In a specific implementation, when the authentication server determines that the login authentication is passed based on the encoding sequence and the group index, the authentication server returns the authorized access instruction to the client, and the client adds a preset value to each number in the digital sequence corresponding to the target group sequence, where the preset value is selected according to actual needs, for example, the preset value is set to 1.

[0064] Figure 2 Another flowchart of a login authentication method provided by an embodiment of the application is shown, and the execution subject of the method can be a hop authentication module, which includes a plurality of hop authentication units corresponding to an authentication server. As shown in the figure, the method 200 can include the following steps:

[0065] Step 201: obtaining an encoding sequence and a group index.

[0066] The grouping index is determined by the client according to input identity authentication information and the total number of authentication servers; the encoding sequence is determined according to a preset correspondence between a grouping sequence and a number sequence, and the number sequence is determined based on the target grouping sequence; and the target grouping sequence is generated by grouping the identity authentication information according to the grouping index.

[0067] In a specific implementation, the hop authentication module is configured to perform identity authentication on a pre-visit user, and includes a plurality of hop authentication units, one of which can correspond to one authentication server, and the authentication server is a cloud server set by an information management platform for identity authentication.

[0068] The hop authentication module obtains an encoding sequence and a grouping index sent by a client. The grouping index is determined by the client according to input identity authentication information and the total number of authentication servers; the encoding sequence is determined according to a preset correspondence between a grouping sequence and a number sequence, and the number sequence is determined based on the target grouping sequence; and the target grouping sequence is generated by grouping the identity authentication information according to the grouping index.

[0069] Step 202: Grouping processing is performed on the encoding sequence according to the grouping index to obtain a grouping sequence.

[0070] In a specific implementation, the hop authentication module can determine a grouping manner of identity authentication information according to the grouping index obtained in step 201, perform grouping processing on the identity authentication information according to the grouping manner, and generate a grouping sequence.

[0071] Step 203: A target hop authentication unit corresponding to the grouping sequence is determined, and the grouping sequence is encrypted according to an independent authentication sequence corresponding to the target hop authentication unit to obtain a ciphertext conversion sequence.

[0072] In a specific implementation, the hop authentication module determines a target hop authentication unit corresponding to each grouping sequence, wherein each hop authentication unit included in the hop authentication module stores a grouping record sub-table of all pre-visit users based on the hop authentication unit and an independent authentication sequence. The independent authentication sequence is a string composed of a plurality of numbers 1 and numbers 0. The grouping record sub-table and the independent authentication sequence of all pre-visit users based on the hop authentication unit stored in each hop authentication unit are also stored in the hop authentication module.

[0073] Here, it should be noted that, for the current pre-visit user, the grouping record sub-table of the pre-visit user stored in all hop authentication units is combined to obtain the same content as the grouping record table stored in the information grouping unit in the total table.

[0074] Further, the packet sequence is encrypted according to the independent authentication sequence corresponding to the target hop authentication unit to obtain a ciphertext conversion sequence.

[0075] Step 204: transmitting the ciphertext conversion sequence to the target hop authentication unit, and generating an authorized access instruction of the client when the target hop authentication unit determines that the verification is completed based on the ciphertext conversion sequence.

[0076] In a specific implementation, the ciphertext conversion sequence corresponding to each packet sequence is sent to the corresponding target hop authentication unit. After the target hop authentication unit receives all the ciphertext conversion sequences corresponding to the current pre-visit user's current visit based on the hop authentication module, the target hop authentication unit performs an AND operation on the ciphertext conversion sequences according to the independent authentication sequence of the current pre-visit user stored in the target hop authentication unit, performs a decimal conversion on the operation result, and restores all the packet sequences of the current pre-visit user's current visit based on the target hop authentication unit. The restored all packet sequences are matched with the contents in the current pre-visit user packet record word table stored in the target hop authentication unit. If all the contents are consistent, the target hop authentication unit generates an independent authentication success instruction and transmits the independent authentication success instruction to the hop authentication module. The hop authentication module generates an authorized access instruction after receiving the independent authentication success instruction transmitted by all the target hop authentication units.

[0077] In a possible implementation, in step 202, the encoding sequence is grouped according to the grouping index to obtain a packet sequence, including:

[0078] The grouping rule is determined according to a comparison result of the grouping index and a preset grouping determination value, and the encoding sequence is grouped according to the grouping rule to generate a packet sequence.

[0079] In the embodiment of the application, after the hop authentication module receives the encoding sequence of the current pre-visit user's current visit, all the packet sequences of the current pre-visit user's current visit and the corresponding hop authentication unit are restored according to a preset restoration step. The restoration step is as follows: first, the grouping index B1 of the received current pre-visit user's current visit is compared with the preset grouping determination value P2, and the grouping rule of the current pre-visit user's current visit is restored based on the comparison result. The encoding sequence of the current pre-visit user's current visit is grouped based on the grouping rule, and all the packet sequences of the current pre-visit user's current visit are restored.

[0080] In a possible implementation, in step 203, the target hop authentication unit corresponding to the packet sequence is determined, including:

[0081] obtain an account identifier corresponding to the identity authentication information; determine a grouping record sub-table corresponding to the account identifier and stored in a hop authentication unit corresponding to the authentication server; and determine a target hop authentication unit corresponding to the grouping sequence according to a grouping record sub-table to which the grouping sequence belongs.

[0082] In a specific implementation, the hop authentication module can obtain, according to the account identifier corresponding to the identity authentication information input by the current pre-visit user in this visit, for example, an account name, a grouping record sub-table stored in all hop authentication units. Based on each grouping record sub-table, a grouping sequence corresponding to a number consistent with each grouping sequence in the current pre-visit user's visit is found, and a hop authentication unit corresponding to the grouping sequence is obtained.

[0083] It should be noted that the target hop authentication unit corresponding to the grouping sequence is a hop authentication unit storing a grouping record sub-table to which the grouping sequence belongs.

[0084] In a possible implementation, in step 203, the grouping sequence is encrypted according to an independent authentication sequence corresponding to the target hop authentication unit to obtain a ciphertext conversion sequence, including:

[0085] The independent authentication sequence corresponding to the target hop authentication unit is converted into a binary sequence, and the binary sequence obtained by converting the grouping sequence is subjected to an AND operation with the authentication sequence to obtain the ciphertext conversion sequence.

[0086] In a specific implementation, the hop authentication module transmits all grouping sequences in the current pre-visit user's visit according to a preset distributed transmission rule, including the following steps:

[0087] S2031: Obtain an independent authentication sequence of the pre-visit user stored in a hop authentication unit in the current pre-visit user's visit, convert the independent authentication sequence into a binary sequence, and mark the converted data as a binary authentication sequence F1 of the current pre-visit user's visit based on the hop authentication unit;

[0088] S2032: From all grouping sequences corresponding to the hop authentication unit obtained by restoring all grouping sequences in the current pre-visit user's visit, binary conversion is performed, and the converted data is sequentially marked as E1, E2,..., Ee, 1≤e≤c;

[0089] S2033: Perform an AND operation between the binary authentication sequence F1 and E1, E2,..., Ee, respectively, to obtain all ciphertext conversion sequences based on the hop authentication unit, and transmit the ciphertext conversion sequences to the hop authentication unit;

[0090] S2034: According to S2031 to S2033, all ciphertext conversion sequences of all hop authentication units based on the current pre-visit user's current visit are calculated and transmitted to the corresponding hop authentication unit, so as to ensure the randomness of the type and number of hop authentication units used for password authentication in each authentication process.

[0091] In a possible implementation, after the generation of the authorized access instruction of the client in step 204, the method further includes:

[0092] adding a first identifier at a preset position of the independent authentication sequence of the target hop authentication unit, and adding a second identifier at a preset position of the independent authentication sequence of the hop authentication unit other than the target hop authentication unit in the authentication server.

[0093] In an example embodiment, the hop authentication unit stores a group record sub-table and an independent authentication sequence based on the hop authentication unit of all pre-visit users. The independent authentication sequence is a string composed of numbers 1 and 0, which is in binary form, and the number of bits will increase with the number of logins. The increased characters are only 1 or 0. After the single hop authentication unit successfully authenticates the group sequence belonging to it, a first identifier is added to the left, for example, the first identifier is 1. If it does not participate in authentication in the subsequent access, a second identifier is added to the left, for example, the second identifier is 0. The change frequency of the independent authentication sequence is associated with the number and time of logins of the pre-login user, so as to further ensure the dynamic variability of the independent authentication sequence.

[0094] In a possible implementation, after the generation of the authorized access instruction of the client in step 204, the method further includes:

[0095] sending the authorized access instruction to the client, so that the client adds a preset value to each number in the number sequence corresponding to the group sequence in the group record table.

[0096] In an example embodiment, the hop authentication module generates an authorized access instruction after receiving the independent authentication success instruction transmitted by all hop authentication units, and transmits the authorized access instruction to the information management platform and the client module respectively, and synchronously updates the independent authentication sequence based on the corresponding all hop authentication units of the current pre-visit user stored in the memory.

[0097] After generating the authorized access instruction, the jump point authentication module generates a passive update instruction and transmits it along with the username entered by the current pre-access user during this access to all other jump point authentication units that did not transmit any data during this authentication process. After receiving the passive update instruction and the username entered by the current pre-access user during this access from the jump point authentication module, all jump point authentication units will add the number 0 to the leftmost of the independent authentication sequence of the current pre-access user stored in them.

[0098] Furthermore, the information management platform performs security management on the software product information of the pre-accessing users. The information management platform stores all software product information entrusted to it by the pre-accessing users. Upon receiving the authorization instruction transmitted by the jump-point authentication module, the information management platform authorizes the current pre-accessing user for this access, allowing them to update their software product information during this access.

[0099] After receiving the authorized access instruction transmitted by the jump point authentication module, the client adds a preset value, such as 1, to the number corresponding to the corresponding group sequence in the information group unit based on all the group sequences of the current pre-accessed user's access.

[0100] Figure 3 This paper illustrates a schematic diagram of the structure of a client provided in an embodiment of this application. This client can be used to perform the above-described actions. Figure 1 In some or all embodiments of the above, the client 300 includes:

[0101] The indicator determination module 310 is used to obtain the input identity authentication information and determine the grouping indicators based on the identity authentication information and the total number of authentication servers;

[0102] The sequence generation module 320 is used to group the identity authentication information according to the grouping index to generate a target group sequence;

[0103] The sequence determination module 330 is used to determine the number sequence corresponding to the target group sequence according to the preset correspondence between the group sequence and the numbers, and to determine the encoding sequence of the identity authentication information based on the number sequence;

[0104] The information sending module 340 is used to send the encoded sequence and the grouping index to the jump point authentication module, which is used to perform login authentication based on the encoded sequence and the grouping index.

[0105] In one possible implementation, the indicator determination module 310, when determining the grouping indicator based on the identity authentication information and the total number of authentication servers, is specifically used for:

[0106] hash the identity authentication information to obtain a hash value of the identity authentication information;

[0107] convert English characters in the hash value of the identity authentication information into corresponding ASCII code values and sum the ASCII code values to obtain a character ASCII code value sum;

[0108] determine a grouping index according to the character ASCII code value sum, a total number of authentication servers, and a preset hop coefficient.

[0109] In a possible implementation, the sequence generation module 320, when generating a target grouping sequence by grouping the identity authentication information according to the grouping index, is specifically configured to:

[0110] determine a grouping rule according to a comparison result of the grouping index and a preset grouping determination value;

[0111] group the identity authentication information according to the grouping rule to generate the target grouping sequence.

[0112] The grouping rule includes iterative grouping and cutting grouping. When determining the grouping rule according to the comparison result of the grouping index and the preset grouping determination value, the sequence generation module 320 is specifically configured to:

[0113] determine iterative grouping as the grouping rule in a case where the grouping index is greater than or equal to the preset grouping determination value;

[0114] determine cutting grouping as the grouping rule in a case where the grouping index is less than the grouping determination value.

[0115] In a possible implementation, in a case where the grouping rule is iterative grouping, when generating the target grouping sequence by grouping the identity authentication information according to the grouping index, the sequence generation module 320 is specifically configured to:

[0116] determine a plurality of target characters in the identity authentication information according to a preset extraction rule;

[0117] extract target characters from the identity authentication information in sequence from each of the target characters, to obtain a target grouping sequence.

[0118] In a possible implementation, in a case where the grouping rule is cutting grouping, when generating the target grouping sequence by grouping the identity authentication information according to the grouping index, the sequence generation module 320 is specifically configured to:

[0119] divide the identity authentication information into a plurality of sequences according to a target character quantity.

[0120] According to the plurality of sequences, a target grouping sequence is generated.

[0121] In a possible implementation, the client 300 further includes:

[0122] The instruction obtaining module is configured to obtain an authorized access instruction returned by the hop authentication module based on the encoding sequence and the grouping index, and add a preset value to each number in the digital sequence corresponding to the target grouping sequence.

[0123] Embodiments of the present application provide a client, including an index determining module, a sequence generating module, a sequence determining module and an information sending module; the index determining module obtains input identity authentication information, and determines a grouping index according to the identity authentication information and a total number of authentication servers; the sequence generating module generates a target grouping sequence by performing grouping processing on the identity authentication information according to the grouping index; the sequence determining module determines a digital sequence corresponding to the target grouping sequence according to a preset correspondence between a grouping sequence and a number, and determines an encoding sequence of the identity authentication information based on the digital sequence; and the information sending module sends the encoding sequence and the grouping index to a hop authentication module, and the hop authentication module is configured to perform login authentication based on the encoding sequence and the grouping index. In this way, by performing dynamic grouping and encoding on identity authentication information, security problems such as account password leakage, replay attacks and brute force attacks can be prevented, and the security of the login process can be improved.

[0124] Figure 4 A structure diagram of a hop authentication module provided by embodiments of the present application is shown, and the authentication server can be used to execute part or all of the embodiments in the above Figure 2 The hop authentication module 400 includes a plurality of hop authentication units corresponding to authentication servers, and includes:

[0125] The information obtaining module 410 is configured to obtain an encoding sequence and a grouping index; the grouping index is determined by a client according to input identity authentication information and a total number of authentication servers; the encoding sequence is determined according to a preset correspondence between a grouping sequence and a number, and is determined based on a digital sequence corresponding to a target grouping sequence; and the target grouping sequence is generated by performing grouping processing on the identity authentication information according to the grouping index.

[0126] The sequence grouping module 420 is configured to perform grouping processing on the encoding sequence according to the grouping index, to obtain a grouping sequence.

[0127] The sequence encryption module 430 is configured to determine a target hop authentication unit corresponding to the grouping sequence, perform encryption processing on the grouping sequence according to an independent authentication sequence corresponding to the target hop authentication unit, and obtain a ciphertext conversion sequence.

[0128] The instruction generation module 440 is configured to transmit the ciphertext conversion sequence to the target hop authentication unit, and generate an authorized access instruction of the client in a case where the target hop authentication unit determines that the verification is completed based on the ciphertext conversion sequence.

[0129] In a possible implementation, the sequence grouping module 420, when used for performing grouping processing on the encoding sequence according to the grouping index to obtain the grouping sequence, is specifically configured to:

[0130] determine a grouping rule according to a comparison result of the grouping index and a preset grouping determination value;

[0131] perform grouping processing on the encoding sequence according to the grouping rule to generate the grouping sequence.

[0132] In a possible implementation, the sequence encryption module 430, when used for determining the target hop authentication unit corresponding to the grouping sequence, is specifically configured to:

[0133] obtain an account identifier corresponding to the identity authentication information;

[0134] determine a grouping record sub-table corresponding to the account identifier stored in a hop authentication unit corresponding to the authentication server;

[0135] determine the target hop authentication unit corresponding to the grouping sequence according to a grouping record sub-table to which the grouping sequence belongs.

[0136] In a possible implementation, the sequence encryption module 430, when used for performing encryption processing on the grouping sequence according to an independent authentication sequence corresponding to the target hop authentication unit to obtain the ciphertext conversion sequence, is specifically configured to:

[0137] perform binary conversion on the independent authentication sequence corresponding to the target hop authentication unit to obtain an authentication sequence;

[0138] perform an AND operation on the grouping sequence converted into a binary sequence and the authentication sequence to obtain the ciphertext conversion sequence.

[0139] In a possible implementation, the authentication server 400 further includes:

[0140] The identifier adding module is configured to add a first identifier at a preset position of the independent authentication sequence corresponding to the target hop authentication unit.

[0141] adding a second identifier at a preset position of the independent authentication sequence of the other hop authentication unit except the target hop authentication unit corresponding to the authentication server.

[0142] In a possible implementation, the authentication server 400 further includes:

[0143] The instruction sending module is configured to send the authorized access instruction to the client, so that the client adds a preset value to each number in the number sequence corresponding to the group sequence in the group record table.

[0144] The embodiment of the application provides a hop authentication module, which comprises a plurality of hop authentication units corresponding to an authentication server, and comprises an information acquisition module, a sequence grouping module, a sequence encryption module and an instruction generation module; the information acquisition module acquires an encoded sequence and a grouping index; the sequence grouping module groups the encoded sequence according to the grouping index to obtain a grouped sequence; the sequence encryption module determines a target hop authentication unit corresponding to the grouped sequence, encrypts the grouped sequence according to an independent authentication sequence corresponding to the target hop authentication unit to obtain a ciphertext conversion sequence; and the instruction generation module generates an authorized access instruction of the client by transmitting the ciphertext conversion sequence to the target hop authentication unit, and generates the authorized access instruction of the client in the case where the target hop authentication unit determines that the verification is completed based on the ciphertext conversion sequence. In this way, the encoded sequence sent by the client is dynamically grouped and encrypted, so that the identity authentication information is not easy to be tampered with or leaked, and the security of the login process is improved.

[0145] Figure 5 A hardware structure schematic diagram of an electronic device is shown, and the electronic device 500 comprises a processor 510, and optionally, an internal bus 520, a network interface 530 and a memory 540. The memory 540 can comprise a memory 541, for example, a high-speed random access memory (RAM), and can also comprise a non-volatile memory 542, for example, at least one disk memory. Of course, the electronic device 500 can also comprise other hardware required by other services.

[0146] The processor 510, the network interface 530 and the memory can be connected with each other through an internal bus 520, which can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. For the convenience of representation, only one bidirectional arrow is used in the figure, but it does not mean that there is only one bus or one type of bus.

[0147] The memory 540 stores programs. Specifically, the programs can include program codes including computer operation instructions. The memory 540 can include a memory 541 and a non-volatile memory 542, and provide instructions and data for the processor 510.

[0148] The processor 510 reads the corresponding computer programs from the non-volatile memory 542 into the memory and then runs, and forms the device for positioning the target user at a logical level. The processor 510 executes the programs stored in the memory, and specifically executes: Figure 1 Or Figure 2 The method disclosed in the illustrated embodiment and the functions and beneficial effects of each method described in the foregoing method embodiment will not be repeated here.

[0149] The above as described in the present application Figure 1 Or Figure 2The method disclosed by the embodiment shown can be applied to the processor 510 or implemented by the processor 510. The processor 510 can be an integrated circuit chip with processing capability. In the implementation process, each step of the above method can be completed by integrated logic circuits of hardware in the processor 510 or instructions in the form of software. The processor 510 described above can be a general processor, including a central processing unit (CPU), a network processor (NP), etc.; can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components. Each method, step and logic block diagram disclosed in the embodiment of the present application can be implemented or executed. The general processor can be a microprocessor or the processor can also be any conventional processor. The steps of the method disclosed in combination with the embodiment of the present application can be directly embodied as a hardware decoding processor for execution, or a combination of hardware and software modules in the decoding processor for execution. The software module can be located in a random access memory, a flash memory, a read only memory, a programmable read only memory or an electrically erasable programmable memory, a register, etc. The storage medium in the storage, the processor reads the information in the storage, and combines the hardware to complete the steps of the above method.

[0150] The computer device can also execute the methods described in the foregoing method embodiments, and achieve the functions and beneficial effects of the methods described in the foregoing method embodiments, which will not be described here.

[0151] Of course, in addition to the software implementation, the electronic device 500 of the present application does not exclude other implementation manners, such as logic devices or a combination of software and hardware, etc. That is, the execution subject of the following processing flow is not limited to each logic unit, but can also be hardware or logic devices.

[0152] The embodiment of the present application also proposes a computer readable storage medium, the computer readable medium stores one or more programs, the one or more programs when being executed by the electronic device including a plurality of application programs, make the electronic device execute Figure 1 Or Figure 2 The method disclosed by the embodiment shown and the functions and beneficial effects of the methods described in the foregoing method embodiments will not be described here.

[0153] The computer readable storage medium includes a read-only memory (ROM), a random access memory (RAM), a magnetic disc or an optical disc, etc.

[0154] Further, the embodiment of the present application further provides a computer program product, the computer program product comprises a computer program stored in a non-transitory computer readable storage medium, the computer program comprises program instructions, when the program instructions are executed by a computer, the following processes are implemented: Figure 1 Or Figure 2 The method disclosed in the embodiment and the functions and advantages of the methods described in the foregoing method embodiments are not described here again.

[0155] The embodiment of the present application can be applied to various electronic device cooperation or interconnection scenarios, including: mobile phone and notebook computer / tablet computer cooperation and interconnection; mobile terminal and smart television / display cooperation and interconnection; mobile phone, or tablet computer and vehicle entertainment system cooperation and interconnection; mobile terminal and smart conference system cooperation and interconnection, etc. Thus, the needs of users in smart home, smart office, smart travel and other diversified scenarios are met.

[0156] In summary, the above only describes the preferred embodiments of the present application, and does not limit the protection scope of the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principles of the present application shall be included in the protection scope of the present application.

[0157] The system, device, module or unit described in the above embodiments can be specifically implemented by a computer chip or entity, or by a product with certain functions. A typical implementation device is a computer. Specifically, the computer may, for example, be a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0158] Computer-readable media includes permanent and non-permanent, movable and non-movable media that can implement information storage by any method or technology. The information can be computer-readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassette, magnetic tape disk storage or other magnetic storage devices, or any other non-transmission medium that can store information accessible to a computing device. According to the definition herein, computer-readable media does not include transitory media such as modulated data signals and carriers.

[0159] It should also be noted that the terms "comprising", "containing", or any other variant thereof are intended to cover non-exclusive inclusions, so that a process, method, article or apparatus that includes a list of elements does not only include those elements, but also includes other elements not explicitly listed, or inherent to such a process, method, article or apparatus. Without more limitations, the element defined by the statement "comprising a" does not exclude the presence of additional identical elements in the process, method, article or apparatus that includes the element.

[0160] Each of the embodiments in the specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other. Each embodiment focuses on the difference from other embodiments. In particular, for the system embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and the relevant parts can be referred to the part of the method embodiments.

Claims

1. A login authentication method, characterized in that, Applied to the client side, including: Obtain the input identity authentication information, and determine the grouping index based on the identity authentication information and the total number of authentication servers; Based on the grouping index, the identity authentication information is grouped to generate a target grouping sequence; Based on the preset correspondence between grouping sequences and numbers, determine the number sequence corresponding to the target grouping sequence, and determine the encoding sequence of the identity authentication information based on the number sequence; The encoded sequence and the grouping indicator are sent to the jump point authentication module, which is used to perform login authentication based on the encoded sequence and the grouping indicator; The step of determining the grouping index based on the identity authentication information and the total number of authentication servers includes: The identity authentication information is hashed to obtain the hash value of the identity authentication information; Convert the English characters in the hash value of the identity authentication information into their corresponding ASCII code values ​​and sum them to obtain the total sum of the character ASCII code values; The grouping index is determined based on the sum of the ASCII values ​​of the characters, the total number of authentication servers, and the preset jump point coefficient. The step of grouping the identity authentication information according to the grouping index to generate a target grouping sequence includes: Based on the comparison result between the grouping index and the preset grouping judgment value, the grouping rules are determined; According to the grouping rules, the identity authentication information is grouped to generate a target grouping sequence.

2. The method according to claim 1, characterized in that, The grouping rules include iterative grouping and segmented grouping. The step of determining the grouping rules based on a comparison between the grouping index and a preset grouping determination value includes: If the grouping index is greater than or equal to the preset grouping determination value, the iterative grouping is determined as a grouping rule; If the grouping index is less than the grouping determination value, the grouping is determined to be the grouping rule.

3. The method according to claim 1, characterized in that, When the grouping rule is iterative grouping, the step of grouping the identity authentication information according to the grouping index to generate a target grouping sequence includes: Based on preset extraction rules, multiple target characters in the identity authentication information are determined; Starting from each target character, the target number of characters are extracted sequentially from the identity authentication information to obtain the target group sequence.

4. The method according to claim 1, characterized in that, When the grouping rule is segmentation, the step of grouping the identity authentication information according to the grouping index to generate a target grouping sequence includes: Based on the number of target characters, the identity authentication information is divided into multiple sequences; Based on the multiple sequences, a target grouping sequence is generated.

5. The method according to any one of claims 1 to 4, characterized in that, After sending the encoded sequence and the packet indicator to the jump point authentication module, the method further includes: The jump point authentication module obtains the authorized access instruction returned by the encoding sequence and the grouping indicator, and adds a preset value to each number in the number sequence corresponding to the target grouping sequence.

6. A login authentication method, characterized in that, This is applied to a jump point authentication module, which includes multiple jump point authentication units, each corresponding to an authentication server, and includes: Obtain the encoding sequence and grouping index; wherein, the grouping index is determined by the client based on the input identity authentication information and the total number of authentication servers; the encoding sequence is determined based on the correspondence between the preset grouping sequence and numbers to determine the numerical sequence corresponding to the target grouping sequence; the target grouping sequence is generated by grouping the identity authentication information according to the grouping index; The encoded sequence is grouped according to the grouping index to obtain a grouped sequence; Determine the target hop point authentication unit corresponding to the group sequence, and encrypt the group sequence according to the independent authentication sequence corresponding to the target hop point authentication unit to obtain the ciphertext conversion sequence; By transmitting the ciphertext conversion sequence to the target jump point authentication unit, and if the target jump point authentication unit determines that the verification is completed based on the ciphertext conversion sequence, it generates an authorized access instruction for the client. The grouping criteria are determined based on the identity authentication information and the total number of authentication servers, including: The identity authentication information is hashed to obtain the hash value of the identity authentication information; Convert the English characters in the hash value of the identity authentication information into their corresponding ASCII code values ​​and sum them to obtain the total sum of the character ASCII code values; The grouping index is determined based on the sum of the ASCII values ​​of the characters, the total number of authentication servers, and the preset jump point coefficient. Based on the grouping index, the identity authentication information is grouped to generate a target grouping sequence, including: Based on the comparison result between the grouping index and the preset grouping judgment value, the grouping rules are determined; According to the grouping rules, the identity authentication information is grouped to generate a target grouping sequence.

7. The method according to claim 6, characterized in that, The step of grouping the encoded sequence according to the grouping index to obtain a grouped sequence includes: Based on the comparison result between the grouping index and the preset grouping judgment value, the grouping rules are determined; According to the grouping rules, the encoded sequence is grouped to generate a grouped sequence.

8. The method according to claim 7, characterized in that, The authentication unit for determining the target jump point corresponding to the group sequence includes: Obtain the account identifier corresponding to the identity authentication information; Determine the sub-table of group records corresponding to the account identifier stored in the jump point authentication unit corresponding to the authentication server; The target jump point authentication unit corresponding to the group sequence is determined based on the group record sub-table to which the group sequence belongs.

9. The method according to claim 7, characterized in that, The step of encrypting the block sequence according to the independent authentication sequence corresponding to the target jump point authentication unit to obtain the ciphertext conversion sequence includes: The independent authentication sequence corresponding to the target jump point authentication unit is converted into binary to obtain the authentication sequence; After converting the block sequence into a binary sequence, a bitwise AND operation is performed with the authentication sequence to obtain the ciphertext conversion sequence.

10. The method according to claim 7, characterized in that, After generating the authorized access instruction for the client, the method further includes: A first identifier is added at a preset position in the independent authentication sequence corresponding to the target jump point authentication unit; A second identifier is added to the preset position of the independent authentication sequence of the other jump point authentication units besides the target jump point authentication unit in the jump point authentication unit corresponding to the authentication server.

11. The method according to any one of claims 6 to 10, characterized in that, After generating the authorized access instruction for the client, the method further includes: The authorized access instruction is sent to the client so that the client adds a preset value to each number in the number sequence corresponding to the group sequence in the group record table.

12. A client, characterized in that, include: The indicator determination module is used to obtain the input identity authentication information and determine the grouping indicators based on the identity authentication information and the total number of authentication servers; The sequence generation module is used to group the identity authentication information according to the grouping index to generate a target group sequence; The sequence determination module is used to determine the number sequence corresponding to the target group sequence according to the preset correspondence between group sequences and numbers, and to determine the encoding sequence of the identity authentication information based on the number sequence; The information sending module is used to send the encoded sequence and the grouping index to the jump point authentication module, and the jump point authentication module is used to perform login authentication based on the encoded sequence and the grouping index; Specifically, the indicator determination module, when acquiring input identity authentication information and determining grouping indicators based on the identity authentication information and the total number of authentication servers, is used for: The identity authentication information is hashed to obtain the hash value of the identity authentication information; Convert the English characters in the hash value of the identity authentication information into their corresponding ASCII code values ​​and sum them to obtain the total sum of the character ASCII code values; The grouping index is determined based on the sum of the ASCII values ​​of the characters, the total number of authentication servers, and the preset jump point coefficient. When the sequence generation module is used to group the identity authentication information according to the grouping index and generate a target group sequence, it is specifically used for: Based on the comparison result between the grouping index and the preset grouping judgment value, the grouping rules are determined; According to the grouping rules, the identity authentication information is grouped to generate a target grouping sequence.

13. A jump point authentication module, characterized in that, The jump point authentication module includes multiple jump point authentication units, each corresponding to an authentication server, including: An information acquisition module is used to acquire an encoding sequence and a grouping indicator; wherein, the grouping indicator is determined by the client based on the input identity authentication information and the total number of authentication servers; the encoding sequence is determined based on the correspondence between preset grouping sequences and numbers to determine the numerical sequence corresponding to the target grouping sequence; the target grouping sequence is generated by grouping the identity authentication information according to the grouping indicator; A sequence grouping module is used to group the encoded sequence according to the grouping index to obtain a grouped sequence; The sequence encryption module is used to determine the target jump point authentication unit corresponding to the block sequence, and to encrypt the block sequence according to the independent authentication sequence corresponding to the target jump point authentication unit to obtain the ciphertext conversion sequence. The instruction generation module is used to generate an authorized access instruction for the client by transmitting the ciphertext conversion sequence to the target jump point authentication unit, and when the target jump point authentication unit determines that the verification is completed based on the ciphertext conversion sequence; The grouping criteria are determined based on the identity authentication information and the total number of authentication servers, including: The identity authentication information is hashed to obtain the hash value of the identity authentication information; Convert the English characters in the hash value of the identity authentication information into their corresponding ASCII code values ​​and sum them to obtain the total sum of the character ASCII code values; The grouping index is determined based on the sum of the ASCII values ​​of the characters, the total number of authentication servers, and the preset jump point coefficient. Based on the grouping index, the identity authentication information is grouped to generate a target grouping sequence, including: Based on the comparison result between the grouping index and the preset grouping judgment value, the grouping rules are determined; According to the grouping rules, the identity authentication information is grouped to generate a target grouping sequence.

14. An electronic device, characterized in that, It includes a processor and a memory, the memory storing a program or instructions that can run on the processor, the program or instructions being executed by the processor to implement the steps of the method according to any one of claims 1 to 12.

15. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a program or instructions that, when executed by a processor, implement the steps of the method according to any one of claims 1 to 12.

16. A computer program product, characterized in that, The computer program product includes a computer program stored on a non-transitory computer-readable storage medium, the computer program including program instructions that, when executed by a computer, cause the computer to perform the steps of the method according to any one of claims 1 to 12.

Images